Virtual machine moved to removable media are not documented.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-15902	ESX1060	SV-16844r1_rule	ECSC-1	Medium

Description
From a theft perspective, virtual machines are easy to copy and move to a person’s USB drive, portable hard drive, etc. An insider could potentially move the organization’s entire data center on any type of removable media that had sufficient space.

STIG	Date
VMware ESX 3 Policy	2016-05-03

Details

Check Text ( C-16262r1_chk )
Ask the IAO/SA if virtual machines have been copied to removable media (DVD, CD-ROM, USB drives). If so, request the documentation for all virtual machine moves to removable media. If no documentation exists, this is a finding.

Fix Text (F-15863r1_fix)
Document all virtual machine moves to removable media.